What is best practice in organisational responses to child sexual abuse by persons affiliated with that organisation, or that occurred while the organisation had a duty of care to the child?

Has the nature of institutional responses to alleged child sexual abuse varied across different organisation types (e.g. faith-based) or functions (e.g., out-of-home care) of an institution impact the risk of child sexual abuse to children? What are the factors that contribute to victim satisfaction/ dissatisfaction with the organisational response?

What is best practice in compensation and redress?

What is required to enable a victim to access their records? In what ways can/should organisations hold perpetrators to account?